CVE-2018-15332: Concurrent Execution using Shared Resource with Improper Synchronization

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition...

PT-2018-12978

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM client versions prior to 7.1.7.2 for Linux and macOS Description The issue allows an unprivileged user to potentially gain ownership of files owned by root on the local client host due to a race condition in the svpn component...

CVE-2018-5547: Missing Authorization

Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy...

CVE-2018-5546: Incorrect Permission Assignment for Critical Resource

The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of...

PT-2018-17040

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM client versions prior to 7.1.7.1 for Linux and macOS Description The issue allows an unprivileged user to gain ownership of files owned by root on the local client host, potentially leading to the disclosure of sensitive...

PT-2018-17041

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM client versions prior to 7.1.7.1 for Windows Description The Windows Logon Integration feature of the F5 BIG-IP APM client uses Legacy logon mode by default, which allows unprivileged users to potentially gain administrator...

PT-2018-17023

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM client versions prior to 7.1.7 for Linux and Mac OS X Description The issue allows an unprivileged user to assume super-user privileges on the local client host, potentially gaining access to sensitive information, manipulating...

CVE-2018-5529: Undefined Security Weakness

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information,...